Privacy policy

Vercel

The web app is hosted by Vercel Inc. (USA/EU regions depending on configuration). Access data (e.g. IP address, time, requested URL, user agent) may be processed in server log files. Processing is based on Art. 6 Abs. 1 lit. f DSGVO (secure and efficient operation) or Art. 6 Abs. 1 lit. b DSGVO in the context of service use. We have a processor relationship with Vercel; for transfers to third countries we rely on appropriate safeguards (in particular standard contractual clauses under Art. 46 DSGVO). Further information: vercel.com/legal/privacy-policy.

Supabase

Authentication, database and file storage are provided via Supabase Inc. as a processor (Art. 28 DSGVO). Account, profile and app content data are processed there. Standard contractual clauses may also apply to international transfers. Privacy Policy: supabase.com/privacy.

OpenStreetMap / Mapbox

To display the world map we load map tiles from Mapbox (primary) or, as a fallback, from OpenStreetMap tile servers. Your IP address is typically transmitted to the respective map service; depending on the provider, further technical data (e.g. zoom level, map extent) may arise. Legal basis: Art. 6 Abs. 1 lit. f DSGVO (providing the map feature) or lit. b DSGVO.

• Mapbox: mapbox.com/legal/privacy
• OpenStreetMap Foundation: osmfoundation.org — Privacy Policy

Browser geolocation

Location determination (e.g. when logging a find, setting a garden or using Garden Navi) may use your voluntary location permission via the browser Geolocation API. Your location is transmitted to us or used in the app only if you allow it in the browser. You may revoke permission at any time in browser settings. Legal basis: Art. 6 Abs. 1 lit. a DSGVO.

Garden Navi (GPS-assisted guidance in the garden)

Optional Garden Navi uses GPS/location data from your device to show distance, bearing and approach to a selected garden plant. Processing of the live location for navigation happens purely locally on your device (comparison with the selected target pin or a locally set start point). There is no lasting transmission of this live location to third parties for tracking purposes.

Saved garden pins and location details you consciously store may — like other app content — reside in the cloud with your account (Supabase); that is distinct from local live navigation. Legal basis for local geolocation use: Art. 6 Abs. 1 lit. a DSGVO (consent). Withdraw anytime via browser/device permissions and by ending Garden Navi.

EXIF location data from photos

When you upload a spot photo, the app may read location metadata (EXIF GPS) from the image, if present, to suggest or place the find on the world map — including afterwards or after offline tours. Processing happens locally / as part of your save flow; we only store the resulting coordinates together with the spot you consciously save or publish.

You can use photos without GPS metadata or set the location manually. Strip EXIF data before upload if you do not want automatic placement. Legal basis: Art. 6(1)(b) GDPR (providing the spotting feature) and — where consent is required — Art. 6(1)(a) GDPR.

Location-based signals (plant radar / Garden Navi)

Optional features such as plant radar (proximity alert) and Garden Navi may trigger local vibration when approaching pins and — for Garden Navi — acoustic sonar pulses. These signals are generated solely for on-device navigation / orientation and are created locally on your device; they are not transmitted to third parties as audio/vibration data.

This requires your current location via browser/device geolocation — only locally to compare with visible or selected pins. No continuous tracking or sharing of your live location with other users for this purpose. Features can be turned off anytime; without location permission or without vibration/audio permission the signals stay inactive. Legal basis: Art. 6(1)(a) GDPR (consent). Withdraw anytime via app settings and browser/device permissions.